From 26b20b4de16ee89d6089297390aba1964108b321 Mon Sep 17 00:00:00 2001 From: Tim Shamilov Date: Wed, 6 Dec 2023 11:55:39 -0500 Subject: [PATCH] pr review: pin commit hashes --- .github/workflows/alpha-npm.yml | 4 ++-- .github/workflows/docs-ci.yml | 6 +++--- .github/workflows/docs-publish.yml | 8 ++++---- .github/workflows/release-npm.yml | 4 ++-- .github/workflows/scorecard.yml | 4 ++-- .github/workflows/security.yml | 4 ++-- .github/workflows/tests-ci.yml | 18 +++++++++--------- 7 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/alpha-npm.yml b/.github/workflows/alpha-npm.yml index abfc6b0f7..5d53de311 100644 --- a/.github/workflows/alpha-npm.yml +++ b/.github/workflows/alpha-npm.yml @@ -25,10 +25,10 @@ jobs: steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 registry-url: https://registry.npmjs.org/ diff --git a/.github/workflows/docs-ci.yml b/.github/workflows/docs-ci.yml index c090d9273..8d6c40a49 100644 --- a/.github/workflows/docs-ci.yml +++ b/.github/workflows/docs-ci.yml @@ -16,10 +16,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 registry-url: https://registry.npmjs.org/ @@ -44,7 +44,7 @@ jobs: docsGenerator: typedoc-markdown - name: Save Artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@a8a3f3a #v3.1.3 if: always() with: name: tbdocs-reporter-output diff --git a/.github/workflows/docs-publish.yml b/.github/workflows/docs-publish.yml index 4d3a63da3..907ab27aa 100644 --- a/.github/workflows/docs-publish.yml +++ b/.github/workflows/docs-publish.yml @@ -25,10 +25,10 @@ jobs: steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 registry-url: https://registry.npmjs.org/ @@ -48,7 +48,7 @@ jobs: curl -o docs/favicon.ico https://developer.tbd.website/img/favicon.ico - name: Upload documentation artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@a8a3f3a #v3.1.3 with: name: jsdoc path: ./docs @@ -72,7 +72,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Setup Pages uses: actions/configure-pages@v3 diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml index 8bdca4144..8f0b78a56 100644 --- a/.github/workflows/release-npm.yml +++ b/.github/workflows/release-npm.yml @@ -37,10 +37,10 @@ jobs: steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 registry-url: https://registry.npmjs.org/ diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 3f308dcb8..38968db83 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,7 +32,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 with: persist-credentials: false @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@a8a3f3a #v3.1.3 with: name: SARIF file path: results.sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 3a27caab1..cefadf25f 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 with: ref: ${{ github.head_ref }} @@ -45,7 +45,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 with: ref: ${{ github.head_ref }} diff --git a/.github/workflows/tests-ci.yml b/.github/workflows/tests-ci.yml index edcef7570..cf3ae1c9c 100644 --- a/.github/workflows/tests-ci.yml +++ b/.github/workflows/tests-ci.yml @@ -16,10 +16,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 cache: "npm" @@ -31,10 +31,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 registry-url: https://registry.npmjs.org/ @@ -81,10 +81,10 @@ jobs: packages: "--workspace packages/common --workspace packages/crypto --workspace packages/credentials --workspace packages/user-agent --workspace packages/proxy-agent --workspace packages/api --workspace packages/identity-agent" steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@5ef044f #v4.0.0 with: node-version: 18 registry-url: https://registry.npmjs.org/ @@ -102,7 +102,7 @@ jobs: - name: Restore Cached Playwright Browsers id: cache-playwright-restore - uses: actions/cache/restore@v3 + uses: actions/cache/restore@84995e0 #v3.3.2 with: path: ~/Library/Caches/ms-playwright key: ${{ runner.os }}-playwright-${{ env.PLAYWRIGHT_VERSION }} @@ -112,7 +112,7 @@ jobs: run: npx playwright install --with-deps - name: Save Playwright Cache (if no cache) - uses: actions/cache/save@v3 + uses: actions/cache/save@e083308 #v3.3.2 id: cache-playwright-save if: steps.cache-playwright-restore.outputs.cache-hit != 'true' with: @@ -140,5 +140,5 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde6 #v4.1.1 - uses: TBD54566975/sdk-development@v0.2.3